VYPR

Shopping Cart Software

by Ashopsoftware

CVEs (1)

  • CVE-2019-25391HigFeb 22, 2026
    risk 0.53cvss 8.2epss 0.00

    Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter. Attackers can send POST requests to the admin/bannedcustomers.php endpoint with crafted SQL payloads…